
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39342e302f32342d3234203d3e20313333383233.roa
File: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=
Subject key identifier: 8C:90:6F:58:2B:5E:7D:F8:50:9E:A7:CB:35:1A:C0:89:A0:43:B7:23
Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial: 37EA4AA5B0683EF5E9D580C12246C68955750306
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39342e302f32342d3234203d3e20313333383233.roa
Signing time: Sun 03 May 2026 02:29:46 +0000
ROA not before: Sun 03 May 2026 02:24:46 +0000
ROA not after: Sun 02 May 2027 02:29:46 +0000
asID: 133823
IP address blocks: 103.54.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ea:4a:a5:b0:68:3e:f5:e9:d5:80:c1:22:46:c6:89:55:75:03:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Validity
Not Before: May 3 02:24:46 2026 GMT
Not After : May 2 02:29:46 2027 GMT
Subject: CN=8C906F582B5E7DF8509EA7CB351AC089A043B723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:94:d9:78:89:db:fd:f4:24:60:1a:30:73:
19:50:b6:b2:db:ea:c7:f7:a9:99:96:17:f6:3d:72:
16:de:fb:13:f4:46:86:0e:da:04:7c:82:ca:c6:a1:
13:9d:e9:8a:a0:a1:84:ab:87:06:b8:80:ac:71:aa:
12:45:dc:4c:e6:e3:4f:76:6b:0f:59:c0:3c:5e:28:
df:3f:37:cd:fc:53:15:d2:72:c6:3f:65:dd:50:19:
bc:95:27:5e:da:72:dd:0b:32:8f:5b:a6:d2:fd:78:
fa:fc:f6:6f:c4:4e:56:01:82:85:30:9c:15:ea:b4:
12:89:51:4d:70:1d:ec:89:65:4c:91:2d:b0:26:9c:
04:15:48:01:fa:c8:1e:05:22:9b:9e:af:a9:81:28:
0b:1d:c3:92:10:03:10:ba:79:21:59:91:f4:0d:13:
93:31:fa:1b:44:ed:60:a8:33:0f:08:a2:11:51:aa:
20:dd:1d:02:48:02:c0:73:8b:35:07:7c:e8:c7:0e:
c3:5c:84:29:cd:51:b1:f6:9a:90:96:f0:54:2d:be:
2d:c0:ef:9f:ba:3b:d9:aa:94:34:54:53:00:9e:da:
6a:76:b3:1f:5f:7e:80:12:f8:2b:f5:0a:14:f7:6e:
44:0d:98:57:14:31:d6:e5:c5:42:4d:27:35:6f:c6:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:90:6F:58:2B:5E:7D:F8:50:9E:A7:CB:35:1A:C0:89:A0:43:B7:23
X509v3 Authority Key Identifier:
keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39342e302f32342d3234203d3e20313333383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a8:e5:bc:90:44:1b:ff:cb:05:ac:1a:4e:c7:71:dd:d5:fc:
74:f2:d1:5e:72:94:18:03:a8:f3:6c:40:f6:22:1a:0e:23:21:
fb:44:45:4a:74:78:74:3b:b7:33:97:cd:49:cb:b1:b6:6f:21:
39:78:96:2b:cc:d5:a9:b5:f7:ef:54:4b:79:c4:20:c6:dd:2d:
a0:c4:db:61:c1:8b:12:4f:2c:2a:87:d4:3f:4b:af:16:fc:09:
60:4f:28:30:53:91:a6:ea:c9:50:4d:77:b0:2c:2e:0e:15:3e:
81:8c:63:c7:d0:1b:e8:24:7e:d0:80:68:9f:c3:11:1e:8c:a9:
0e:f9:17:7c:80:f8:59:9f:35:6a:e3:89:77:47:98:1e:a6:7f:
70:ce:bb:ae:a0:e0:76:53:37:42:bf:b2:0d:a2:16:f1:b8:5f:
d3:12:2b:63:3b:cb:b0:e9:80:30:a1:3c:84:17:67:f8:d1:07:
dc:1c:fd:c6:da:a5:d9:27:f0:1a:b7:ee:c5:31:cd:89:f7:2a:
0d:a8:b0:90:a9:01:57:30:64:59:e8:41:b3:1b:af:29:20:47:
cb:61:bf:b0:80:12:21:48:91:62:0f:f1:50:2f:93:bc:eb:12:
b1:d4:e1:43:1a:54:ff:3b:db:8f:93:fe:a0:25:0d:22:d8:e2:
48:5f:d2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:25 2026 by rpki-client